Warning! A new phishing attack on Facebook users has been revealed

PhishLabs company specialists have announced a new phishing campaign targeting mobile device owners only. Main attacks are targeted at Facebook users as well as Apple iCloud, Comcast, Craigslist and OfferUp.

The new method is based on the fact that mobile browsers do not fully display the link in the address bar. This rampage is delighted by the attackers, adding dashes and subdomains in the URL to make the link look real to the mobile device. For example, the real domain hxxp: //m.facebook.com------validate--step1.rickytaylk [dot] com / sign_in.html is actually rickytaylk.com and not m.facebook.com. Since the mobile browser only shows part of the link, users will only see m.facebook.com with dashes.

According to experts, this attack will only work if consumers are inconsiderate. The collected user data is used by attackers to send spam messages with links to phishing sites from user's friends. As PhishLabs specialist Crane Hassold said, links are mostly sent via SMS. While some mobile browsers and messengers make it possible to fully see the connection, most features in SMS applications are missing.

Earlier, scientists reported another phishing campaign, in which attackers used a hacked site with a fake PayPal authorization page to steal online banking data and bank card data for consumers.

*** Don't miss out on my next post! Follow me @bachoangel ***